MS KB3011140 breaks information store in Exchange 2013 CU6

Hello,
Last night Microsoft KB 3011140 was inadvertently installed on our Exchange 2013 CU6 server.  I just want to warn everyone that you should be very cautious with this update.  Upon reboot, the information store would crash, recover, then crash and
recover, infintly.  End user symptoms are the pop up bubble in the lower right regarding Outlook lost connectivity to Exchange server, then a few minutes later Outlook restored connectivity to Exchange, rinse and repeat.
This constant up and down would cause many freezes and slowness in Outlook.  The last time we had this issue was when we went to CU6.  Microsoft tech support though free of charge installed a patch Exchange2013-KB2997209_2997847-x64.en.msp and
that fixed our problem.  They left the patch for us, so I thought I would try to re-run this.  It progressed for awhile and then rolled back saying it encountered an unexpected error (what else is new?).
So I removed KB 3011140 which took about 35 minutes to do and upon reboot Exchange is back up and running.
The only side effect I am noticing today is Lync 2013 is asking for Exchange credentials and EWS Internal / EWS External URI's are not populated, however I have no issues reading my conversation history and calendar in Lync.  I need to reboot my machine
yet but other people have started reporting the same thing.

Hi KJSTech1,
Thanks for your generous sharing and glad to know it works after recycling the MSExchangeServicesAppPool.
It's really hard to say why the patch cause this issue, since I didn't find someothers has the same issue. Thanks for your reporting.
Thanks
Mavis Huang
TechNet Community Support

Similar Messages

  • Cannot disable a mailbox in Exchange 2013 CU6!?!?!?!

    I cannot disable a mailbox in Exchange 2013 CU6. I get the following error:
    Anyone seen this error? As you know, I just want to remove the Exchange attributes from the user object in Active Directory. Of course, deleting the user object works just fine but don't want to go that route. 

    I tried with the EMS (Powershell) and I still get an error:
    [PS] C:\>disable-mailbox [email protected]
    Confirm
    Are you sure you want to perform this action?
    Disabling mailbox "[email protected]" will remove the Exchange properties from the Active Directory user object and mark the mailbox in the database for removal. If the mailbox has an archive or remote archive, the archive will also
    be 
    marked for removal. In the case of remote archives, this action is permanent. You can't reconnect this user to the remote archive again.
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): 
    Y
    Active Directory operation failed on LocalDCName.local.com. This error is not retriable. Additional information: The parameter is incorrect.
    Active directory response: 00000057: LdapErr: DSID-0C090CB9, comment: Error in attribute conversion operation, data 0, v2580
        + CategoryInfo          : NotSpecified: (:) [Disable-Mailbox], ADOperationException
        + FullyQualifiedErrorId : [Server=LA-MBX01Server,RequestId=6ed97c1e-ae68-4670-a097-c4e65f683274,TimeStamp=11/18/2014 7:50:07 PM] [FailureCategory=Cmdlet-ADOperationException] 8D6C0FEB,Microsoft.Exchange.Management.RecipientTasks.Disable 
       Mailbox
        + PSComputerName        : LocalDCName.local.com
    I captured everything with the START-TRANSCRIPT cmdlet and changed the specific values to our organization (i.e., "[email protected]" and "LocalDCName.Local.com"). I've tried this on other mailboxes and I receive the same error whether
    I use EMC or EMS. I believe this might be AD schema related just not sure where.

  • Cannot edit/create new mailbox in ECP - Exchange 2013 CU6

    Hello, I am currently running Exchange 2013 CU6. I cannot perform tasks related to recipients such as edit/create new mailbox. Additionally I cannot view the properties of the virtual directories.
    I tried multiple browsers (Chrome, Firefox, IE) in different PCs and the result is the same
    For example, I cannot click "Browse" in "new user mailbox" tab
    "New local Mailbox move" page displays blank
    I browsed through the event logs and found the following errors (Event 4 and Event 21):
    Event 4
    Current user: 'Unauthenticated'
    Request for URL 'https://mailserver.address..com:444/ecp/15.0.995.28/scripts/js.axd?resources=NewMigrationBatch&v=15.0.995.28&c=en-US(https://mailserver.address..capcx.com/ecp/15.0.995.28/scripts/js.axd?resources=NewMigrationBatch&v=15.0.995.28&c=en-US)'
    failed with the following error:
    Microsoft.Exchange.Management.ControlPanel.BadRequestException:
    The request sent by your browser was not valid. ---> Microsoft.Exchange.Management.ControlPanel.BadRequestException: The request sent by your browser was not valid. --->
    System.Exception: 'ToolkitScriptManager' could not generate combined script resources file.
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
       at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
       at
    System.Web.HttpApplication.ExecuteStep(IExecutionStepstep, Boolean&
    completedSynchronously)
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
       at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
       at
    System.Web.HttpApplication.ExecuteStep(IExecutionStepstep, Boolean&
    completedSynchronously)
    Microsoft.Exchange.Management.ControlPanel.BadRequestException:
    The request sent by your browser was not valid. ---> System.Exception: 'ToolkitScriptManager' could not generate combined script
    resources file.
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
    System.Exception: 'ToolkitScriptManager'
    could not generate combined script resources file.
    Flight info: Features:[[Global.DistributedKeyManagement, False],[Global.GlobalCriminalCompliance,
    False],[Global.MultiTenancy, False],[Global.WindowsLiveID, False],[Eac.AllowMailboxArchiveOnlyMigration,
    True],[Eac.AllowRemoteOnboardingMovesOnly, False],[Eac.BulkPermissionAddRemove, True],[Eac.CmdletLogging,
    True],[Eac.CrossPremiseMigration, False],[Eac.DiscoveryDocIdHint, False],[Eac.DiscoveryPFSearch,
    False],[Eac.DiscoverySearchStats, False],[Eac.DlpFingerprint, False],[Eac.EACClientAccessRulesEnabled,
    False],[Eac.GeminiShell, False],[Eac.ManageMailboxAuditing, False],[Eac.ModernGroups,
    False],[Eac.Office365DIcon, False],[Eac.RemoteDomain, False],[Eac.UCCAuditReports, False],[Eac.UCCPermissions,
    False],[Eac.UnifiedComplianceCenter, False],[Eac.UnifiedPolicy, False],[Eac.UnlistedServices,
    False],],  Flights:[],  Constraints:[[MACHINE, SERVER-NAME],[MODE, ENTERPRISE],[PROCESS, W3WP],],
    IsGlobalSnapshot: True
    Event 21
    Current user: 'Unauthenticated'
    Script request for URL 'https://mailserver.address.com:444/ecp/15.0.995.28/scripts/js.axd?resources=NewMigrationBatch&v=15.0.995.28&c=en-US(https://mailserver.address.com/ecp/15.0.995.28/scripts/js.axd?resources=NewMigrationBatch&v=15.0.995.28&c=en-US)'
    failed with the following error:
    Microsoft.Exchange.Management.ControlPanel.BadRequestException:
    The request sent by your browser was not valid. ---> System.Exception: 'ToolkitScriptManager' could not generate combined script
    resources file.
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
    System.Exception: 'ToolkitScriptManager'
    could not generate combined script resources file.
    Flight info: Features:[[Global.DistributedKeyManagement, False],[Global.GlobalCriminalCompliance,
    False],[Global.MultiTenancy, False],[Global.WindowsLiveID, False],[Eac.AllowMailboxArchiveOnlyMigration,
    True],[Eac.AllowRemoteOnboardingMovesOnly, False],[Eac.BulkPermissionAddRemove, True],[Eac.CmdletLogging,
    True],[Eac.CrossPremiseMigration, False],[Eac.DiscoveryDocIdHint, False],[Eac.DiscoveryPFSearch,
    False],[Eac.DiscoverySearchStats, False],[Eac.DlpFingerprint, False],[Eac.EACClientAccessRulesEnabled,
    False],[Eac.GeminiShell, False],[Eac.ManageMailboxAuditing, False],[Eac.ModernGroups,
    False],[Eac.Office365DIcon, False],[Eac.RemoteDomain, False],[Eac.UCCAuditReports, False],[Eac.UCCPermissions,
    False],[Eac.UnifiedComplianceCenter, False],[Eac.UnifiedPolicy, False],[Eac.UnlistedServices,
    False],],  Flights:[],  Constraints:[[MACHINE, SERVER-NAME],[MODE, ENTERPRISE],[PROCESS, W3WP],],
    IsGlobalSnapshot: True
     Any help?

    Hello Amy,
    I will try to follow your suggestions. I will update once I get access to the server.
    Anyways, the whole thing was back to normal for 1 day on its own, but right now the issue is happening again. Permission-wise, the account I used is in listed Organization Management role
    Update: I forgot to try the EMS, but after I recycle the
    MSExchangeECPAppPool, everything works fine, except for viewing Groups and Permissions
    An error in the event viewer is displayed:
    Current user: 'Unauthenticated'
    Script request for URL 'https://address.com:444/ecp/15.0.995.28/scripts/js.axd?resources=EditRoleAssignmentPolicy&v=15.0.995.28&c=en-US(https://address.com/ecp/15.0.995.28/scripts/js.axd?resources=EditRoleAssignmentPolicy&v=15.0.995.28&c=en-US)'
    failed with the following error:
    Microsoft.Exchange.Management.ControlPanel.BadRequestException: The request sent by your browser was not valid. ---> System.Exception: 'ToolkitScriptManager' could not generate combined script resources file.
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
       at Microsoft.Exchange.Management.ControlPanel.CombineScriptsHandler.ProcessRequest(HttpContext context)
    System.Exception: 'ToolkitScriptManager' could not generate combined script resources file.
    Flight info: Features:[[Global.DistributedKeyManagement, False],[Global.GlobalCriminalCompliance, False],[Global.MultiTenancy, False],[Global.WindowsLiveID, False],[Eac.AllowMailboxArchiveOnlyMigration, True],[Eac.AllowRemoteOnboardingMovesOnly,
    False],[Eac.BulkPermissionAddRemove, True],[Eac.CmdletLogging, True],[Eac.CrossPremiseMigration, False],[Eac.DiscoveryDocIdHint, False],[Eac.DiscoveryPFSearch, False],[Eac.DiscoverySearchStats, False],[Eac.DlpFingerprint, False],[Eac.EACClientAccessRulesEnabled,
    False],[Eac.GeminiShell, False],[Eac.ManageMailboxAuditing, False],[Eac.ModernGroups, False],[Eac.Office365DIcon, False],[Eac.RemoteDomain, False],[Eac.UCCAuditReports, False],[Eac.UCCPermissions, False],[Eac.UnifiedComplianceCenter, False],[Eac.UnifiedPolicy,
    False],[Eac.UnlistedServices, False],],  Flights:[],  Constraints:[[MACHINE, SERVER-NAME],[MODE, ENTERPRISE],[PROCESS, W3WP],], IsGlobalSnapshot: True
    However, after a while, things are back to normal... I don't understand what's happening..

  • DC Restart when start installing Exchange 2013 CU6

    I have a domain installed on windows server 2012 R2 with function level 2008 R2 and when i try to install "as a administrator" Update for exchange 2013 CU6 or CU5  DC restart and am facing this error :
    Error:
    The following error was generated when "$error.Clear(); 
    install-CannedAddressLists -DomainController $RoleDomainController
    " was run: "Microsoft.Exchange.Data.Directory.ADTransientException: Failed to reconnect to Active Directory server  Make sure the server is available, and that you have used the correct credentials. ---> System.DirectoryServices.ActiveDirectory.ActiveDirectoryServerDownException:
    Active Directory server is not available. Please retry at a later time.
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnectionFromPool(ConnectionPoolType connectionPoolType, ADObjectId domain, String serverName, Int32 port, Boolean& serverConnectionPresentButDownOrDisconnected)
       at Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, String partitionFqdn, ADObjectId domain, String serverName, Int32 port, NetworkCredential credential)
       at Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, String partitionFqdn, NetworkCredential networkCredential, String serverName, Int32 port)
       at Microsoft.Exchange.Data.Directory.ADDataSession.GetConnection(String preferredServer, Boolean isWriteOperation, String optionalBaseDN, ADObjectId& rootId, ADScope scope)
       at Microsoft.Exchange.Data.Directory.ADDataSession.GetWritableConnection(String preferredServer, ADObjectId identity, ADRawEntry scopeDeterimingObject)
    I already prepare AD and Schema before start install 
    Please Advice Thanks

    Hi   Midoooz
    Thank you for your question.
    Do you install the Exchange Server on the DC?
    From you posted error, I think you can try to make your exchange server in maintenance mode, then you can try install exchange CU6.
    You can refer to the following link:
    http://support2.microsoft.com/kb/2713696
    Note:  
    Stop Maintenance Mode on the computer that is running Exchange Server after the Exchange Server 2013 CU6 upgrade is completed.
    If there are any questions, please let me know.
    Best Regard,
    Jim

  • Large ETLTraces files after Exchange 2013 CU6

    After installing Exchange 2013 CU6, you may notice the Exchange Drive is consumed a lot than before and the size is increasing rapidly. After troubleshooting, you may find everything is running properly and
    there is no issues with your Exchange Server.
    Then you need to check whether the files in the following location is the root cause:
    C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\logfie
    C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces
    (You may find log files like “DocumentProcessingTrace_XX.etl )
    Prior to CU6, there is not ETLTrace folder listed in this location and there are log folders however the log file has files no exceeding 7 MB size.
    Post upgrade, there comes the ETLTrace folder and the files in this folder are close to 50 MB and the log files folder have log files exceeding 50 MB size.
    This is a designed behavior in Exchange CU6, if you have limited hard drive space, as a workaround solution, we can safely remove or move the location of these lo files:
    Before doing the changes, please firstly stop the health monitoring service. To Change the Log File Path, the Registry Key value is:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Search Foundation for Exchange\Diagnostics
    To Change the ETLTrace path the registry Value is:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\16.0\Search\Diagnostics\Tracing
    Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

    @Simon_Wu, I tried your solution. However after a couple of days the logs were moved back to the original, default location. It looks like the server has a process which checks for hacks and undoes any attempts to change the path.
    Interestingly the altered Registry entries remained altered, however the files were switched back to the default location. It generates just over 1Gb of logs per day on a largely idling Exchange 2013 CU7 server with 350 mailboxes.
    Go figure!
    What I found to work consistently and reliably is to replace default folders with junction points to another folder on another drive.
    I also found that these files are created by a process which runs under the System process (PID 4), therefore you'll need to restart the server in Safe Mode to replace the default folders with junction points.

  • Throttling policy not working on Exchange 2013 CU6

    Hi,
    We have a test throttling policy to restrict a mailbox to send at most 2 messages
    per minute in our live Exchange 2013 CU6 enviroment. It was associated to a test mailbox. We have separated installed 2 mailboxe and 2 cas server roles in our enviroment. I have checked latest CU-s (7 & 8) but these are
    not fixing any related bugs.
    We tried lots of workaround (see below list) and solutions to fix this but it is still not working with outlook MAPI and OWA client.
    Throttling policy not working
    smtp service restart
    RPC Client Acces service restart
    The policy details:
    Get-ThrottlingPolicy  low_rate_limit |fl *limit*
    MessageRateLimit   : 2
    RecipientRateLimit : 1000
    Get-mailbox [email protected] | fl ThrottlingPolicy
    ThrottlingPolicy           : low_rate_limit
    Do you have any idea what is the problem?
    Thank you in advance.
    br,
    Zoltan

    Hi Zoltan,
    Base on my research, you need to configure the MessageRateLimit parameter on receive connector also.
    The MessageRateLimit parameter specifies the maximum number of messages that can be sent by a single client IP address per minute. The default value for a Receive connector configured in the Transport service on a Mailbox server is
    unlimited. The default value for a Receive connector configured on an Edge server is 600 messages per minute. The valid input range for this parameter is 1 to 2147483647. To remove the message rate limit on a Receive connector, enter a value of
    unlimited.
    https://technet.microsoft.com/en-us/library/bb125140(v=exchg.150).aspx
    Best regards,
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Niko Cheng
    TechNet Community Support

  • Exchange 2013 CU6 event id 1003

    Installed cu6, after that OWA and ECP stopped to work, with a redirection loop, when I check my eventlogs I see thousands of this error message:
    RpcHttp] An internal server error occurred. The unhandled exception was: System.MissingMethodException: Method not found: 'System.String Microsoft.Exchange.Security.Authentication.IIdentityExtensions.GetSafeName(System.Security.Principal.IIdentity)'.
       at Microsoft.Exchange.HttpProxy.ProxyModule.<>c__DisplayClasse.<OnEndRequest>b__d()
       at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(TryDelegate tryDelegate, FilterDelegate filterDelegate, CatchDelegate catchDelegate)
    Cant find a workaround, anyone else seen this error?

    Maybe this can help someone.
    v 
    Replaced SharedWebConfig files under the location "V15\FrontEnd\HttpProxy"
    v 
    Added the missing permission on Exchange Back End Web Site by comparing the same with our lab
    v 
    On IIS
    è Exchange Back End
    è Changed Physical Path
    è it to "V15\ClientAccess"
    v 
    Still after which we couldn’t browse OWA under Exchange Back End using Port 444 but found that ECP works fine
    v 
    Replaced the SharedWebConfig file from working Exchange 2013 CU6 under the location "V15\ClientAccess"
    v 
    Ran IISReset
    v 
    Confirmed that OWA and other virtual directories as well started working fine without any issues

  • Exchange 2013 CU6 migration batch

    Hello
    After install exchange 2013 cu6 server to root domain in multiple domain environment I cant move mailbox from exchange 2007 to new server because migration batch search mailbox only root domain controller. 
    ADTopology list all child domain dc without error.
    setup /ps and /pad run without error.
    but new-moverequest working.
    please help.
    Udvozlettel:Sneff Gabor

    Hi
    It might be a bug in the GUI as powershell is working. Did you also update exchange 2007 to its latest rollup?
    Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Exchange 2013 CU6 installation hangs on step 9: Languages

    Just had Exchange 2013 CU6 update hang on Step 9 of 18: Languages.  It was stuck at 0% for almost an hour.  I was able to get it moving forward by disabling SCEP 2012 by killing the process and deselecting check certificate for server certificate
    revocation in IE.  Both steps were taken nearly simultaneously and the install process for Exchange jumped up immediately. Both steps were taken based on info from:
    https://social.technet.microsoft.com/Forums/exchange/en-US/2a346a37-d092-4189-8a07-e8a9971925f1/cu2-installation-hangs-on-step-9-languages?forum=exchangesvrdeploy
    and
    https://social.technet.microsoft.com/Forums/exchange/en-US/0975bb5e-f270-4e39-abf3-70809cd98161/exchange-2010-sp3-installation-hangs-language-pack-hell
    Just wanted to post that this issue was encountered on CU6 as well.  Has anyone had a similar experience or able to tell which of these two steps (or both) is actually needed?

    Hello,
    Thanks a lot for sharing, saved my day!
    Cheers:)

  • Recover mailbox from Exchange server 2010 information store to exchange server 2013

    I have a big issue. I have a correct exchange server 2010 where the active directory is corrupt but the information store is good.
    I would like to recover a couple of mailboxes to an exchange server 2013.
    Can anyone give me a detailed walk through of how I can accomplish this?
    Thank in advance

    Well if your AD is messed up that leaves you in a jam for sure because;
    1. Database portability ONLY works within the same organization, so you cannot just install a new 2010 server in a completely different forest and then move the DB in hopes that DB portability will work.
    2. As Ed said you should build a new Exchange 2010 server and use portability but it has to be in the same organization.
    3. Here is a good article on how to accomplish
    http://exchangeserverpro.com/exchange-2010-database-portability-disaster-recovery/
    4. Now if you by chance have an AD backup before it went south you could build a separate network with same names etc just keep it isolated from the production server and then restore AD to that environment and you could then use DB portability.
    That said if you don't have any other machines to work with then you are in a bit of a pickle and will have to use a 3rd party product to get to that data within the 2010 DB.   We make a product that can do this (DigiScope), however if you don't
    have any budget to handle its a non-issue.
    The only other thing you could consider is to restore your AD from a previous point in time, however BE VERY CAREFUL if you consider this since it could cause more issues then you have now.
    BTW if you AD is messed up, where are you putting this new 2013 server?
    Search, Recover, & Extract Mailboxes, Folders, & Email Items from Offline Exchange Mailbox and Public Folder EDB's and Live Exchange Servers or Import/Migrate direct from Offline EDB to Any Production Exchange Server, even cross version i.e. 2003 -->
    2007 --> 2010 --> 2013 with Lucid8's
    DigiScope

  • After upgrade to Exchange 2013 CU6 Application log flooded with Performance counter updating error 106 for Time in Resource per second

    After upgrading to CU6 for Exchange 2013, the Application event log is flooded with MSExhange Common error 106: Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional
    code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process.  It cannot be recreated or reused until it has been removed or until the process using it
    has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.get_RawValue()
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : System.ArgumentException: Process with an Id of 4776 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    14256 winlogon
    15748 powershell
    6524 Microsoft.Exchange.UM.CallRouter
    5904 w3wp
    584 lsass
    780 LogonUI
    4324 MSExchangeFrontendTransport
    6292 Microsoft.Exchange.Store.Worker
    2744 WmiPrvSE
    576 services
    3136 MonitoringHost
    12568 svchost
    1360 hostcontrollerservice
    8648 WmiPrvSE
    1752 SMSvcHost
    1160 spoolsv
    1356 sftracing
    9528 TiWorker
    10444 explorer
    2732 w3wp
    14908 WmiPrvSE
    3124 Microsoft.Exchange.Store.Worker
    4696 Microsoft.Exchange.Store.Service
    4892 MSExchangeMailboxAssistants
    12208 w3wp
    15740 powershell
    2128 WMSvc
    748 rundll32
    8232 w3wp
    8400 svchost
    3700 MonitoringHost
    15716 powershell
    5864 MSExchangeThrottling
    2908 w3wp
    4088 Microsoft.Exchange.EdgeSyncSvc
    5660 scanningprocess
    2292 wuauclt
    5656 umservice
    6044 scanningprocess
    4076 noderunner
    1908 MSExchangeHMHost
    2892 Microsoft.Exchange.AntispamUpdateSvc
    3876 noderunner
    3676 MSExchangeMailboxReplication
    15732 powershell
    2096 svchost
    7096 UMWorkerProcess
    516 winlogon
    908 svchost
    1296 HealthService
    1492 svchost
    2824 w3wp
    12324 dwm
    1560 ForefrontActiveDirectoryConnector
    304 smss
    10820 w3wp
    8464 svchost
    888 Microsoft.Exchange.ContentFilter.Wrapper
    5024 msexchangerepl
    488 wininit
    8564 taskhostex
    5272 Microsoft.Exchange.ServiceHost
    3832 noderunner
    10088 w3wp
    480 csrss
    7920 conhost
    872 svchost
    5992 scanningprocess
    4808 msdtc
    8352 dllhost
    860 TrustedInstaller
    4008 rundll32
    4400 conhost
    656 svchost
    9828 w3wp
    1832 noderunner
    4392 MSExchangeHMWorker
    1828 mqsvc
    700 svchost
    1628 Microsoft.Exchange.Diagnostics.Service
    3596 w3wp
    2220 Microsoft.Exchange.Directory.TopologyService
    1820 MSExchangeDelivery
    7532 MSExchangeTransport
    13372 svchost
    832 svchost
    9696 conhost
    8316 svchost
    1580 dllhost
    3980 Microsoft.Exchange.RpcClientAccess.Service
    8788 VSSVC
    5948 MSExchangeTransportLogSearch
    2992 MSExchangeDagMgmt
    10632 csrss
    1216 fms
    3776 rundll32
    5356 MSExchangeSubmission
    7908 EdgeTransport
    11576 w3wp
    1600 inetinfo
    1008 svchost
    416 csrss
    808 svchost
    7608 w3wp
    1588 updateservice
    4148 Microsoft.Exchange.Search.Service
    640 w3wp
    796 dwm
    2568 SMSvcHost
    1188 svchost
    4 System
    3484 rdpclip
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=30 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance
    : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : mb-powershell-defaultdomain(CC014C00)
    RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : rpca-powershell-defaultdomain(4598AFAF)
    RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : rpca-w3wp-msexchangemapimailboxapppool(E28F3117)
    RefCount=1 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=86 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : mb-w3wp-msexchangemapimailboxapppool(F9439F58)
    RefCount=1 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=301 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : ad-w3wp-msexchangemapimailboxapppool(35491652)
    RefCount=1 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : rpca-w3wp-msexchangemapifrontendapppool(2C7F2005)
    RefCount=1 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : mb-w3wp-msexchangemapifrontendapppool(BE5C2DAA)
    RefCount=1 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=50 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : ad-w3wp-msexchangemapifrontendapppool(C0FDFAE0)
    RefCount=1 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5)
    RefCount=1 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA)
    RefCount=1 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=75 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230)
    RefCount=1 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262)
    RefCount=1 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D)
    RefCount=1 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=1002 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087)
    RefCount=1 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648)
    RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=204 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507)
    RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=1804 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D)
    RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=64 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917)
    RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D)
    RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2)
    RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7)
    RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=792 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468)
    RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=2537 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662)
    RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF)
    RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810)
    RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=2178 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A)
    RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3)
    RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=1148 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : mb-noderunner-contentenginenode1(2EE8286C)
    RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=322 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : ad-noderunner-contentenginenode1(61591E6)
    RefCount=1 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=73 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4)
    RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E)
    RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251)
    RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=909 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6)
    RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C)
    RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3)
    RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3)
    RefCount=1 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC)
    RefCount=1 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=679 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36)
    RefCount=1 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33)
    RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C)
    RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=89 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6)
    RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33)
    RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C)
    RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=12 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6)
    RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3)
    RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC)
    RefCount=1 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=704 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236)
    RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353)
    RefCount=1 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C)
    RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=40 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196)
    RefCount=1 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : rpca-umservice-umservice.exe(E39A1133)
    RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1
    SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=45 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1
    SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3)
    RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C)
    RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116)
    RefCount=1 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893)
    RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC)
    RefCount=1 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=8 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6)
    RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3)
    RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=400 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C)
    RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=390 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236)
    RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13)
    RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=15105 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC)
    RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=1570 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56)
    RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3)
    RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=55 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC)
    RefCount=1 SpinLock=0 Offset=16240, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=1045 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6)
    RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53)
    RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=13 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C)
    RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=1004 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196)
    RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=2260 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933)
    RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=19900 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C)
    RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=3491 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6)
    RefCount=1 SpinLock=0 Offset=13944, categoryName...

    This error is not resolved in CU8.
    [PS] C:\>Get-ExchangeServer | fl *version*
    AdminDisplayVersion : Version 15.0 (Build 1076.9)
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
    <Provider Name="MSExchange Common" />
    <EventID Qualifiers="49156">106</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-04-15T10:14:22.000000000Z" />
    <EventRecordID>11366785</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EX1.domain.com</Computer>
    <Security />
    </System>
    - <EventData>
    <Data>2</Data>
    <Data>Time in Resource per second</Data>
    <Data>MSExchange Activity Context Resources</Data>
    <Data>The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited. at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime lifetime, Boolean& foundFreeInstance) at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue() Last worker process info : System.ArgumentException: Process with an Id of 884 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo() Processes running while Performance counter failed to update: 15084 w3wp 16804 powershell 16368 SCNotification 21108 conhost 22744 dllhost 17224 conhost 844 MsMpEng 21100 conhost 5580 taskhostex 1724 Microsoft.Exchange.Diagnostics.Service 3852 MSExchangeDagMgmt 13764 MonitoringHost 1264 fms 832 LogonUI 25828 mmc 1688 inetinfo 7900 Microsoft.Exchange.Store.Worker 3840 rundll32 1252 SMSvcHost 15040 msseces 3916 w3wp 1676 svchost 2968 Microsoft.Exchange.Directory.TopologyService 14600 explorer 5548 MSExchangeMailboxReplication 1236 svchost 5976 scanningprocess 2096 WMSvc 2200 w3wp 13376 WmiPrvSE 19472 powershell 8116 umservice 24492 powershell 24060 conhost 7204 MSExchangeTransportLogSearch 1812 WmiPrvSE 16348 w3wp 10260 svchost 2496 conhost 3784 Microsoft.Exchange.AntispamUpdateSvc 9932 Microsoft.Exchange.ContentFilter.Wrapper 16280 conhost 2056 svchost 1192 spoolsv 2052 noderunner 320 smss 5920 scanningprocess 11152 ParserServer 8068 UMWorkerProcess 3756 conhost 304 svchost 2888 w3wp 732 svchost 1900 winlogon 14948 w3wp 22700 noderunner 2872 updateservice 2000 w3wp 700 svchost 1992 mqsvc 4128 Microsoft.Exchange.EdgeSyncSvc 28636 ParserServer 17912 conhost 20652 ParserServer 1960 svchost 14168 msdtc 11436 ParserServer 19192 ParserServer 4536 Microsoft.Exchange.Imap4Service 16168 WmiPrvSE 10132 w3wp 27800 noderunner 25644 mmc 2452 ParserServer 640 lsass 1932 svchost 632 services 3216 ForefrontActiveDirectoryConnector 17436 svchost 4504 Microsoft.Exchange.Store.Service 4500 ParserServer 2772 WmiPrvSE 28200 dllhost 10528 VSSVC 10520 dllhost 7932 Microsoft.Exchange.Store.Worker 1032 rundll32 1920 sftracing 7492 Microsoft.Exchange.Store.Worker 14384 rdpclip 26016 conhost 24464 powershell 13332 MSExchangeHMHost 1008 svchost 10920 csrss 7040 MSExchangeThrottling 3160 MSExchangeTransport 1004 svchost 572 winlogon 7464 Microsoft.Exchange.Store.Worker 10880 WmiPrvSE 7892 Microsoft.Exchange.Store.Worker 12632 CcmExec 992 svchost 10904 WmiPrvSE 4868 Microsoft.Exchange.Imap4Service 6160 w3wp 14348 conhost 8312 dllhost 14776 w3wp 13480 dwm 5720 Microsoft.Exchange.Pop3 544 wininit 7008 Microsoft.Exchange.UM.CallRouter 4420 Microsoft.Exchange.Imap4 6140 Microsoft.Exchange.Pop3 5764 Microsoft.Exchange.Pop3Service 964 svchost 7428 Microsoft.Exchange.Store.Worker 13580 MonitoringHost 25096 noderunner 5700 scanningprocess 13456 conhost 24656 MSExchangeMailboxAssistants 5260 Microsoft.Exchange.RpcClientAccess.Service 6080 Microsoft.Exchange.Search.Service 11288 powershell 3960 MSExchangeDelivery 4440 MSExchangeFrontendTransport 6112 Microsoft.Exchange.Store.Worker 12712 ParserServer 5248 conhost 1368 HealthService 6536 MSExchangeSubmission 26076 conhost 3084 rundll32 6100 Microsoft.Exchange.Pop3Service 24200 conhost 536 csrss 7812 Microsoft.Exchange.Store.Worker 10396 svchost 10824 conhost 21596 MSExchangeHMWorker 7416 Microsoft.Exchange.Store.Worker 852 dwm 7368 Microsoft.Exchange.Store.Worker 468 csrss 17552 conhost 2260 SMSvcHost 12100 CmRcService 4772 Microsoft.Exchange.Imap4 10372 ParserServer 3044 EdgeTransport 4760 conhost 14672 svchost 15100 hostcontrollerservice 6048 msexchangerepl 5616 Microsoft.Exchange.Store.Worker 436 svchost 4 System 6408 Microsoft.Exchange.ServiceHost 0 Idle Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : rpca-e14cmdletswrapper-defaultdomain(B61B0DD9) RefCount=0 SpinLock=0 Offset=40184, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : mb-e14cmdletswrapper-defaultdomain(290EF16) RefCount=0 SpinLock=0 Offset=39856, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=102 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : ad-e14cmdletswrapper-defaultdomain(2CDA669C) RefCount=0 SpinLock=0 Offset=39528, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=81 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=39200, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=1 SpinLock=0 Offset=38872, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=1 SpinLock=0 Offset=38544, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=400734 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36) RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=0 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=280053 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=0 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=142126 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662) RefCount=0 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF) RefCount=0 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=0 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=2068875 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=0 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=0 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=0 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=55883 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=0 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=0 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=0 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=1576 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4) RefCount=0 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : rpca-msexchangehmhost-msexchangehmhost.exe(87A5B053) RefCount=0 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : mb-msexchangehmhost-msexchangehmhost.exe(FB9D599C) RefCount=0 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=20422 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : ad-msexchangehmhost-msexchangehmhost.exe(4E220B96) RefCount=0 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=250572035 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=309575 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : ad-noderunner-contentenginenode1(61591E6) RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=276568 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : ad-msexchangehmworker-msexchangehmworker.exe(712B0516) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : mb-msexchangehmworker-msexchangehmworker.exe(6177C09C) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : rpca-msexchangehmworker-msexchangehmworker.exe(39325ED3) RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=0 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=0 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=489 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6) RefCount=0 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=393256 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D) RefCount=0 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=4885 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507) RefCount=0 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648) RefCount=0 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=42 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6) RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=0 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=0 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=0 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=0 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=0 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=555 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=0 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=0 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=0 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=218529 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=0 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=0 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=0 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=611 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=0 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : rpca-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(128A1B3) RefCount=0 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : mb-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(B4CBDCBC) RefCount=0 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : ad-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(F0E98836) RefCount=0 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : rpca-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(8961F613) RefCount=0 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : mb-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(3C128D5C) RefCount=0 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : ad-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(96BB056) RefCount=0 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=0 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=0 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=0 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=0 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=159000 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C) RefCount=0 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=273020 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=0 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : rpca-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(EAAB5DD3) RefCount=0 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : mb-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(1FC2541C) RefCount=0 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : ad-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(17E0EA16) RefCount=0 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : rpca-w3wp-msexchangeservicesapppool(E8BBF810) RefCount=0 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=1867617 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : mb-w3wp-msexchangeservicesapppool(10FE94BF) RefCount=0 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=3331874 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : ad-w3wp-msexchangeservicesapppool(E0DE475) RefCount=0 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=84124 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6) RefCount=0 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C) RefCount=0 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3) RefCount=0 SpinLock=0 Offset=16896, cate...</Data>
    </EventData>
    </Event>
    https://support.microsoft.com/en-us/kb/2870416/
    I used method
    1, but it did not help
    me.
    Method 2:
    [PS] C:\Windows\system32>Add-Pssnapin Microsoft.Exchange.Management.PowerShell.Setup
    [PS] C:\Windows\system32>New-PerfCounters -definitionfilename "C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf
    \GlsPerformanceCounters.xml"
    New-PerfCounters : The performance counter definition file C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\GlsPerformanceCounters.xml could not be found.
    Any idea ?
    Если Вам помог чей-либо ответ, пожалуйста, не забывайте жать на кнопку "Предложить как ответ" или "Проголосовать за полезное сообщение"

  • Exchange 2013 CU6 update cannot pass preresquites?

    When I go to update our Exchange 2013 server to CU6 (from CU5) I get the following error:
    I was doing something with the Tasks, which cannot be scheduled anymore. How do I fix this?
    Thanks
    Error:
    The following error was generated when "$error.Clear();
    try
    $Target = $env:COMPUTERNAME
    try
    $exSrv = get-ExchangeServer $Target -ErrorAction SilentlyContinue
    catch
    Write-ExchangeSetupLog -Warning "Unable to set monitoring and server state to inactive. Setup will continue.";
    if ($exSrv -eq $null)
    Write-ExchangeSetupLog -Warning "$Target is not an Exchange Server. Unable to set monitoring and server state to inactive. Setup will continue.";
    return
    Set-ServerComponentState $Target -Component Monitoring -Requester Functional -State Inactive
    Write-ExchangeSetupLog -Info "Monitoring has been set to Inactive while setup is running."
    Set-ServerComponentState $Target -Component RecoveryActionsEnabled -Requester Functional -State Inactive
    Write-ExchangeSetupLog -Info "RecoveryActionsEnabled has been set to Inactive while setup is running."
    Set-ServerComponentState $Target -Component ServerWideOffline -Requester Functional -State InActive
    Write-ExchangeSetupLog -Info "The server state has been set to Inactive while setup is running."
    catch
    Write-ExchangeSetupLog -Warning "Unable to set monitoring and server state to inactive. Setup can not continue.";
    throw;
    " was run: "Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on EXCH01.domain.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
    Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    ---> System.DirectoryServices.Protocols.DirectoryOperationException: The user has insufficient access rights.
    at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
    at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
    at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
    --- End of inner exception stack trace ---
    at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException)
    at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)
    at Microsoft.Exchange.Management.SystemConfigurationTasks.SetServerComponentState.InternalProcessRecord()
    at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
    at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".
    Error:
    The following error was generated when "$error.Clear();
    try
    $Target = $env:COMPUTERNAME
    try
    $exSrv = get-ExchangeServer $Target -ErrorAction SilentlyContinue
    catch
    Write-ExchangeSetupLog -Warning "Unable to set monitoring and server state to inactive. Setup will continue.";
    if ($exSrv -eq $null)
    Write-ExchangeSetupLog -Warning "$Target is not an Exchange Server. Unable to set monitoring and server state to inactive. Setup will continue.";
    return
    Set-ServerComponentState $Target -Component Monitoring -Requester Functional -State Inactive
    Write-ExchangeSetupLog -Info "Monitoring has been set to Inactive while setup is running."
    Set-ServerComponentState $Target -Component RecoveryActionsEnabled -Requester Functional -State Inactive
    Write-ExchangeSetupLog -Info "RecoveryActionsEnabled has been set to Inactive while setup is running."
    Set-ServerComponentState $Target -Component ServerWideOffline -Requester Functional -State InActive
    Write-ExchangeSetupLog -Info "The server state has been set to Inactive while setup is running."
    catch
    Write-ExchangeSetupLog -Warning "Unable to set monitoring and server state to inactive. Setup can not continue.";
    throw;
    " was run: "Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on EXCH01.domain.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
    Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    ---> System.DirectoryServices.Protocols.DirectoryOperationException: The user has insufficient access rights.
    at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
    at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
    at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
    --- End of inner exception stack trace ---
    at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException)
    at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)
    at Microsoft.Exchange.Management.SystemConfigurationTasks.SetServerComponentState.InternalProcessRecord()
    at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
    at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".
    Error:
    The following error was generated when "$error.Clear();
    try
    $Target = $env:COMPUTERNAME
    try
    $exSrv = get-ExchangeServer $Target -ErrorAction SilentlyContinue
    catch
    Write-ExchangeSetupLog -Warning "Unable to set monitoring and server state to inactive. Setup will continue.";
    if ($exSrv -eq $null)
    Write-ExchangeSetupLog -Warning "$Target is not an Exchange Server. Unable to set monitoring and server state to inactive. Setup will continue.";
    return
    Set-ServerComponentState $Target -Component Monitoring -Requester Functional -State Inactive
    Write-ExchangeSetupLog -Info "Monitoring has been set to Inactive while setup is running."
    Set-ServerComponentState $Target -Component RecoveryActionsEnabled -Requester Functional -State Inactive
    Write-ExchangeSetupLog -Info "RecoveryActionsEnabled has been set to Inactive while setup is running."
    Set-ServerComponentState $Target -Component ServerWideOffline -Requester Functional -State InActive
    Write-ExchangeSetupLog -Info "The server state has been set to Inactive while setup is running."
    catch
    Write-ExchangeSetupLog -Warning "Unable to set monitoring and server state to inactive. Setup can not continue.";
    throw;
    " was run: "Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on EXCH01.domain.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
    Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    ---> System.DirectoryServices.Protocols.DirectoryOperationException: The user has insufficient access rights.
    at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
    at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
    at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
    --- End of inner exception stack trace ---
    at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
    at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException)
    at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)
    at Microsoft.Exchange.Management.SystemConfigurationTasks.SetServerComponentState.InternalProcessRecord()
    at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
    at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

    Based on "Was Run" error it looks like you don't have permission to store something in AD. Can you try putting server into maintenance mode first and see if you can?
    http://windowsitpro.com/blog/installing-exchange-2013-cu1-dag-member-servers-some-care-and-maintenance-mode-required
    http://vanhybrid.com/2013/11/28/script-putting-exchange-server-2013-into-maintenance-mode/
    If server goes into maintenance mode successfully then re-run the setup...

  • Exchange 2013 CU6 Event ID 4999

    After installing CU6 on the exchange 2013 mailbox server we keep getting the below event error message
    Log Name:      Application
    Source:        MSExchange Common
    Date:          10/2/2014 1:06:25 PM
    Event ID:      4999
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:     
    Description:
    Watson report about to be sent for process id: 30632, with parameters: E12, c-RTL-AMD64, 15.00.0995.029, M.E.RpcClientAccess.Service, M.E.Data.ApplicationLogic, M.E.D.A.U.HttpPhotoRequestBuilder.Build, System.NotSupportedException, 4e29, 15.00.0995.027.
    ErrorReportingEnabled: True
    Event Xml:
    <Event xmlns="">
      <System>
        <Provider Name="MSExchange Common" />
        <EventID Qualifiers="16388">4999</EventID>
        <Level>2</Level>
        <Task>1</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-02T20:06:25.000000000Z" />
        <EventRecordID>7826297</EventRecordID>
        <Channel>Application</Channel>
        <Computer></Computer>
        <Security />
      </System>
      <EventData>
        <Data>30632</Data>
        <Data>E12</Data>
        <Data>c-RTL-AMD64</Data>
        <Data>15.00.0995.029</Data>
        <Data>M.E.RpcClientAccess.Service</Data>
        <Data>M.E.Data.ApplicationLogic</Data>
        <Data>M.E.D.A.U.HttpPhotoRequestBuilder.Build</Data>
        <Data>System.NotSupportedException</Data>
        <Data>4e29</Data>
        <Data>15.00.0995.027</Data>
        <Data>True</Data>
        <Data>False</Data>
        <Data>Microsoft.Exchange.RpcClientAccess.Service</Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Services seem to be fine but i do have a group of users that complain that their outlook 2013 email clients will go non-responsive a few times a days. Wondering if this is related. Also this error is appearing every few minutes. Anyone else experiencing
    this?

    Hi,
    I would like to add some information to this, in case others are facing the same circumstance. I too received the same errors on my Exchange 2013 CU5 and CU6 servers mentioned above. I ended up calling Microsoft Premiere support because there was a very
    large impact in our environment as we had Outlook 2010 clients that were having Exchange 2013 connectivity issues. Long story short, since Outlook 2010 was trying to use RPC to connect to the Exchange 2013 servers and in the Event Viewer we were seeing the
    4999 Event ID multiple times per minute, RPC was crashing on the Exchange servers resulting in client connectivity issues.
    Microsoft ran a ProcDump on the PID for RPC crash and basically came back with nothing only saying that it was a result of someone uploading a picture via Lync that was either corrupt or too large cause the photo store to crash the RPC Service. They also
    were firm in saying that this should have no impact. I was not convinced because this happened after installing CU5 and the client connectivity issues also appeared in conjunction with these 4999 RPC errors. In my mind that is a bug and I asked that something
    be published to address this as it seems silly that one user uploading a Lync profile picture could cripple our environment.
    You would need to navigate to the following location to see this Photo Store. (D:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\photos) Change the path to point to your local Exchange install instance. Most of the files in my location are 0K but
    there are a few that are 4K so it seems they are not large enough to affect anything. We have 4 CAS+MBX servers so I looked at all 4 servers.
    What I ended up doing to resolve the 4999 event ID which actually ended up fixing my client connectivity issues also was to edit the following file. "D:\Program Files\Microsoft\Exchange Server\V15\Bin\Microsoft.Exchange.RpcClientAccess.Service.exe.config"
    Back the above file up and when you open it scroll about 3/4 to 7/8 of the way down and find the following lines:
        <!-- Enables retrieval of the HD photo in DOMT. -->
        <add key="HDPhotoEnabled" value="true" />
    Set the line to "false" like so:
        <!-- Enables retrieval of the HD photo in DOMT. -->
        <add key="HDPhotoEnabled" value="false" />
    Then restart the Microsoft Exchange RPC Client Access service and refresh the Event Viewer and the 4999 errors should stop and client connectivity should be restored.
    I noticed this error with CU5 and then subsequently after I installed CU6, so I had to perform this change after I installed CU6 and probably do the same once CU7 comes out. I do not know the adverse effects of making this change as Microsoft really could
    not explain more than what I wrote above, but I had to get Outlook connectivity restored and this was my only option. It appears that Lync 2010 photos and Outlook 2010 photos stayed intact so no users were complaining that their self-uploaded profile pictures
    were gone. We never had this problem with Outlook 2013 SP1 as we have MAPI enabled and the crashing RPC service would not have effected those clients. OWA was also working just fine.
    Hopefully Microsoft can offer me more of an explanation as I ended up fixing my own issue but I raised concern with how this happened. I hope this helps someone else as it helped me.
    Thanks.
    Alan

  • Exchange 2013 CU6 Update Error /PrepareAD

    setup /PrepareAD /IAcceptExchangeServerLicenseTerms -- Fails
    I have copied this whole folder up to the Schema FSMO role holder and and the forestprep and the domainprep and the /prepareAD will not run.  I have included entries from the ExchangeSetuplog below.  I only changed the Domain Name and the exchange
    organization for security reasons.
    Current Setup.
    Originally installed Exchange 2013 SP1 on windows 2012r2 via an ISO.  This server only had Exchange 2013 installed was not an upgrade.  Our previous version of Exchange that was running on a different server was Exchange 2007.  This server
    is no longer apart of the Exchange organization.
    [11/14/2014 22:00:39.0848] [1] Executing:
        install-AdministrativeGroup -DomainController $RoleDomainController
    [11/14/2014 22:00:39.0864] [2] Active Directory session settings for 'Install-AdministrativeGroup' are: View Entire Forest: 'True', Configuration Domain Controller: 'DomainController', Preferred Global Catalog: 'DomainController', Preferred Domain Controllers:
    '{ DomainController }'
    [11/14/2014 22:00:39.0864] [2] User specified parameters:  -DomainController:'DomainController'
    [11/14/2014 22:00:39.0864] [2] Beginning processing install-AdministrativeGroup
    [11/14/2014 22:00:39.0895] [2] Processing object "Exchange Administrative Group (FYDIBOHF23SPDLT)".
    [11/14/2014 22:00:39.0926] [2] The properties changed on the object 'Exchange Administrative Group (FYDIBOHF23SPDLT)' (CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=ExchangeOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local)
    are: "{  }".
    [11/14/2014 22:00:39.0926] [2] Saving object "Exchange Administrative Group (FYDIBOHF23SPDLT)" of type "AdministrativeGroup" and state "Unchanged".
    [11/14/2014 22:00:39.0926] [2] Previous operation run on domain controller 'DomainController'.
    [11/14/2014 22:00:39.0942] [2] Reading new object "Exchange Administrative Group (FYDIBOHF23SPDLT)" of type "AdministrativeGroup".
    [11/14/2014 22:00:39.0942] [2] Previous operation run on domain controller 'DomainController'.
    [11/14/2014 22:00:40.0036] [2] [ERROR] Active Directory operation failed on DomainController. The object 'CN=Folder Hierarchies,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=ExchangeOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local'
    already exists.
    [11/14/2014 22:00:40.0036] [2] [ERROR] The object exists.
    [11/14/2014 22:00:40.0083] [2] Ending processing install-AdministrativeGroup
    [11/14/2014 22:00:40.0083] [1] The following 1 error(s) occurred during task execution:
    [11/14/2014 22:00:40.0083] [1] 0.  ErrorRecord: Active Directory operation failed on DomainController. The object 'CN=Folder Hierarchies,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=ExchangeOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local'
    already exists.
    [11/14/2014 22:00:40.0083] [1] 0.  ErrorRecord: Microsoft.Exchange.Data.Directory.ADObjectAlreadyExistsException: Active Directory operation failed on DomainController. The object 'CN=Folder Hierarchies,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
    Groups,CN=ExchangeOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local' already exists. ---> System.DirectoryServices.Protocols.DirectoryOperationException: The object exists.
       at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
       at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
       at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException)
       at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)
       at Microsoft.Exchange.Management.Deployment.InstallAdministrativeGroup.InstallConfigurationObject[TObject](ADObjectId id, Boolean force, TObject instance)
       at Microsoft.Exchange.Management.Deployment.InstallAdministrativeGroup.InternalProcessRecord()
       at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
       at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)
    [11/14/2014 22:00:40.0098] [1] [ERROR] The following error was generated when "$error.Clear();
        install-AdministrativeGroup -DomainController $RoleDomainController
    " was run: "Microsoft.Exchange.Data.Directory.ADObjectAlreadyExistsException: Active Directory operation failed on DomainController. The object 'CN=Folder Hierarchies,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=ExchangeOrg,CN=Microsoft
    Exchange,CN=Services,CN=Configuration,DC=domain,DC=local' already exists. ---> System.DirectoryServices.Protocols.DirectoryOperationException: The object exists.
       at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
       at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
       at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException)
       at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)
       at Microsoft.Exchange.Management.Deployment.InstallAdministrativeGroup.InstallConfigurationObject[TObject](ADObjectId id, Boolean force, TObject instance)
       at Microsoft.Exchange.Management.Deployment.InstallAdministrativeGroup.InternalProcessRecord()
       at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
       at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".
    [11/14/2014 22:00:40.0098] [1] [ERROR] Active Directory operation failed on DomainController. The object 'CN=Folder Hierarchies,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=ExchangeOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local'
    already exists.
    [11/14/2014 22:00:40.0098] [1] [ERROR] The object exists.
    [11/14/2014 22:00:40.0098] [1] [ERROR-REFERENCE] Id=CommonGlobalConfig___48aad7b8f00942afbc699677d60bb3fe Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
    [11/14/2014 22:00:40.0098] [1] Setup is stopping now because of one or more critical errors.
    [11/14/2014 22:00:40.0098] [1] Finished executing component tasks.
    [11/14/2014 22:00:40.0130] [1] Ending processing Install-ExchangeOrganization
    [11/14/2014 22:00:40.0130] [0] CurrentResult console.ProcessRunInternal:198: 1
    [11/14/2014 22:00:40.0145] [0] CurrentResult launcherbase.maincore:90: 1
    [11/14/2014 22:00:40.0145] [0] CurrentResult console.startmain:52: 1
    [11/14/2014 22:00:40.0145] [0] CurrentResult SetupLauncherHelper.loadassembly:452: 1
    [11/14/2014 22:00:40.0145] [0] The Exchange Server setup operation didn't complete.  More details can be found in ExchangeSetup.log located in the <SystemDrive>:\ExchangeSetupLogs folder.
    [11/14/2014 22:00:40.0145] [0] CurrentResult main.run:235: 1
    [11/14/2014 22:00:40.0145] [0] The registry key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\V15\Setup, wasn't found.
    [11/14/2014 22:00:40.0145] [0] CurrentResult setupbase.maincore:396: 1
    [11/14/2014 22:00:40.0145] [0] End of Setup

    Hi Ryan,
    From the exchange setup log information, we can find the following error :
    Active Directory operation failed on DomainController. The object 'CN=Folder Hierarchies,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=ExchangeOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local' already exists
    I recommend you refer to the following article to resolve the issue :
    http://www.expta.com/2013/04/active-directory-operation-failed.html
    This happens when the Public Folder tree object has been manually deleted from Active Directory using a tool such as ADSI Edit. In some organizations it becomes impossible to remove Public Folders properly from a legacy Exchange org and admins resort to
    using brute force to remove them.  However, there are lingering attributes in AD that are still pointing to the deleted PFTree, which causes CU1 setup to fail.
    Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. And the changes made in the above blog is not supported officially
    by Microsoft.
    Best regards,
    Niko Cheng
    TechNet Community Support

  • Exchange 2013 CU6 = LastLoggedOnUserAccount is empty

    Hello,
    i'm looking to find the "LastLoggedOnUserAccount" for some mailboxes. On Exchange 2010 we could check this like that:
    Get-MailboxStatistics MAILBOX |select LastLoggedOnUserAccount
    => On Exchange 2013 the Value is empty for all mailboxes...
    any ideas?
    Best,
    Martin

    below forum will answer your question.
    https://social.technet.microsoft.com/Forums/exchange/en-US/0b3ca6f6-abe9-473f-b354-e86c01fd596c/lastloggedonuseraccount-in-exchange-onlineexchange-2013?forum=exchangesvradmin
    Regards
    John

Maybe you are looking for